CVE-2026-30993

Description

Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php. This vulnerability is exploitable via a crafted input.

CVSS Vector

References

• https://cve.joaopaulodeoliveira.dev/cve.php/published/CVE-2026-30993
• https://cve.joaopaulodeoliveira.dev/cve.php/reserved/slah-informatica-eval-injection-rce